---
title: “Allow Javascript tags in Embedded HTML” Property Should Be Disabled
description: "Impact Area Security Severity High Affected Element System property ## Rule ID **SN-0197** ## Impact Journal fields have the ability to render text enclosed within code tags as HTML. There is an associated security risk, since any malicious user can…"
url: "https://community-staging.qualityclouds.com/qcdocs/qcr/rules/allow-javascript-tags-in-embedded-html-property-should-be-disabled/"
updated: "2025-03-21"
category: Rules
---

# “Allow Javascript tags in Embedded HTML” Property Should Be Disabled

Impact Area

Security

           Severity

High

           Affected Element

System property

## Rule ID

**SN-0197**

## Impact

Journal fields have the ability to render text enclosed within code tags as HTML. There is an associated security risk, since any malicious user can write JS code that may be executed on a different client browser after the journal fields are rendered.

## Remediation

Set the glide.ui.security.codetag.allow_script property to false to disable support for embedding Javascript tags using the [code] tag.

### **Time to fix**

15 min

## References

This rule is linked to [Common Weakness Enumeration CWE-150 Improper Neutralization of Escape](https://cwe.mitre.org/data/definitions/150.html).